Privacy Policy

Appraiso LLC ("we," "us," or "our"), a Wyoming limited liability company, operates the Appraiso mobile application and website at appraiso.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Account Information

If you join our launch waitlist, we store your email address, signup time, and launch-notification consent in Supabase to send one email when Appraiso launches. A waitlist signup does not create an account or subscribe you to marketing emails. To leave the list or request removal, email [email protected] from the address you submitted.

When you create an account, we collect your email address and display name. If you sign in with Apple or Google, we receive a unique identifier and, optionally, your name and email as provided by those services.

Photos and Images

When you scan an item, the photo is uploaded to our cloud storage (Cloudflare R2) for AI analysis. Images are linked to your account via your authentication token and are processed solely to identify and appraise your item. Appraiso retains uploaded images temporarily for processing and does not use them to train its own AI models or for any purpose other than delivering scan results; third-party AI-provider handling is described below. To improve item identification, we keep a non-reversible numeric representation (an “embedding”) of each scan together with its item title, category, and estimated value; this representation cannot be turned back into your photo, and the photo itself is not kept.

AI Processing

We use third-party AI services to analyze scans and answer item questions. Google Gemini is our primary visual provider and receives uploaded photos for item identification and visual analysis. If the primary item detector is unavailable or returns unusable output, and our separately controlled vision backup is enabled, DeepSeek may receive the uploaded scan photo solely to identify the item. It is not called after a successful primary result. DeepSeek also receives scan-derived text for features such as recommendations, sentiment summaries, title refinement, luxury listing analysis, and Bytler. For Bytler, DeepSeek may receive your typed question, canonical item identity, and only the selected report or market evidence needed to answer it. We remove email addresses and recognized phone numbers before Bytler provider calls, and Bytler does not send DeepSeek uploaded photos, image URLs, account IDs, authentication tokens, or payment information. Gemini may receive the same redacted text-only payload only when it acts as Bytler's fallback. When Bytler needs current information from the web, or when you ask it to find buying options, the redacted question and the item's name and details are also sent to Perplexity, our web search provider, with a backup search routed through OpenRouter when Perplexity is slow or unavailable.

Bytler Conversations

When you use Bytler, we collect your questions and store them with structured answers and a validated snapshot of the current item report. This lets you restore the conversation across sessions and devices, keeps answers tied to the report that supported them, and enables optional answer feedback or a closed report reason. Do not include passwords, payment-card details, government identifiers, Social Security numbers, or other sensitive information in chat.

Usage Data

In the app, we collect anonymized analytics data including scan counts, feature usage, and app performance metrics via Firebase Analytics. On our website (appraiso.app), we use Google Analytics 4 to measure page visits, referral sources, and approximate region (see "Tracking Technologies & App Tracking" below). This data is not tied to your personal identity and is used solely to improve the Service.

Device Information

We automatically collect certain device information when you use the Service, including device model, operating system version, app version, and general performance metrics. This information is used for diagnostics and to improve compatibility.

Crash and Error Reports

We use Firebase Crashlytics and Sentry to collect crash reports and error logs. These may include device model, OS version, stack traces, and your account email or user ID to help us diagnose issues affecting your account. This data helps us identify and fix bugs.

Subscription Information

If you subscribe to a paid plan, RevenueCat processes your subscription and retains transaction identifiers to manage your subscription status. All payment information (credit card, billing address) is handled directly by Apple through the App Store — we never receive, store, or have access to your payment details.

• To provide, operate, and maintain the Service
• To process your scans and deliver appraisal results
• To manage your account and subscription
• To improve and optimize the Service
• To monitor and analyze usage patterns and trends
• To detect and prevent technical issues
• To send transactional communications (account confirmations, security alerts)
• To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

We share data with third-party service providers only as necessary to operate the Service. Each provider receives only the minimum data required to perform its function:

• Supabase — Authentication and user data storage (receives: email, account ID, scan history and usage counters)
• Firebase (Google) — Analytics and crash reporting (receives: anonymized usage data, device info, crash logs)
• Google Analytics (Google) — Website traffic measurement on appraiso.app (receives: page visits, referral source, approximate region, device and browser type)
• Sentry — Error tracking and performance monitoring (receives: error data, device info, account email and user ID for diagnostics)
• Cloudflare R2 — Temporary image storage (receives: uploaded photos linked to your authenticated session)
• MongoDB Atlas — Storage of scan embeddings used to improve identification (receives: item title, category, estimated value, and a non-reversible numeric representation of the scan; does not receive photos)
• RevenueCat — Subscription management (receives: anonymous user ID, transaction identifiers)
• Google Gemini AI — Item identification and visual analysis (receives: uploaded photos for processing), plus text-only fallback classification or answer generation for Bytler. Under Google's paid-service terms, prompts, files, and responses are not used to improve Google products; Google may retain limited data for abuse monitoring, and any optional project-owned API logs follow the production project's configured retention
• DeepSeek AI — Text-based analysis features including recommendations, sentiment summaries, title refinement, luxury listing analysis, and Bytler (receives: minimized, redacted questions and scan-derived item/report text; does not receive Bytler scan photos). When the separately controlled last-resort vision backup is enabled, DeepSeek may also receive an uploaded scan photo only after the primary item detector fails or returns unusable output. DeepSeek's published API materials do not provide Appraiso a zero-data-retention guarantee; processing may occur in the People's Republic of China under DeepSeek's applicable terms
• Perplexity — Web search for Bytler answers and for finding buying options (receives: the text of your shopping question and the item's name and details, after email addresses and recognized phone numbers are removed; does not receive your photos, account details, or payment information). Perplexity states that this service keeps request and response content on its servers under its own terms and has not given Appraiso a fixed retention period; we instruct it not to make that content retrievable and we do not use its stored-conversation features
• OpenRouter — Routing for a backup web search used only when the primary search is slow or unavailable (receives: the same redacted question and item text; does not receive photos). We request a zero-data-retention route and deny use of the content for training on every such request
• OpenAI — Last-resort vision fallback when Google Gemini is unavailable, and retail-price verification (receives: uploaded photos or their temporary URLs only on the fallback path, and scan-derived text such as item titles for price verification)
• SearchAPI.io and Serper.dev — Visual and web search used to match your item and find listings (receive: uploaded photos or their temporary image URLs for visual search, and scan-derived text queries; they forward these to search engines such as Google, Bing, and Yandex on our behalf)
• Microsoft Bing Visual Search — Visual matching of your item (receives: the temporary URL of your uploaded photo so Bing can fetch and analyze it)
• Railway — Hosting and processing infrastructure for our backend (receives: all request data in transit, including photos, scan text, and account identifiers, while our servers process it)
• Rakuten Advertising — Similar-item retail search (receives: brand-free search keywords derived from your scan; does not receive photos or account data). Outbound links to Rakuten retailers are affiliate links
• eBay Partner Network — Outbound eBay links carry an affiliate identifier so eBay can credit Appraiso as the referrer; eBay may record that you clicked the link (receives: no account information from us)
• Gravatar (Automattic) — Optional profile image lookup (receives: a one-way hash of your account email, never the email itself, and only when you have no Apple or Google profile photo; Apple private-relay addresses are skipped, and initials are shown if no image is found)

Each of these services has its own privacy policy governing data handling. We do not sell your personal data or share it with third parties for advertising or profiling. Some outbound shopping links are affiliate links (eBay Partner Network, Rakuten Advertising) that identify Appraiso as the referrer; they do not receive your account information.

We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We retain your data as follows:

• Account information — retained for as long as your account is active
• Uploaded images — stored temporarily by Appraiso for processing and automatically deleted. Appraiso does not use them to train its own AI models; third-party provider retention and model-use terms are described in this policy
• Scan embeddings — non-reversible numeric representations of scans (with item title, category, and estimated value, but not the photo) are retained to improve identification and removed on request via [email protected]
• Scan history — retained for as long as your account is active and deleted upon account deletion
• Bytler conversations — questions, structured answers, and validated item-report snapshots are retained with the account's scan history so chat can be restored; deleting the item's cloud chat/history or the account deletes the associated thread and its feedback/reports
• Bytler active-session data — the short-lived Redis thread/report snapshot expires after 30 minutes
• Bytler operational telemetry — content-free aggregate counters, closed reason codes, latency, token/cost totals, and provider/tool status are retained for up to 90 days; a pseudonymous operator-unblock audit is retained for up to 30 days. These records do not contain questions, answers, reports, images, URLs, authentication tokens, or account IDs
• AI provider processing — providers may transiently retain inputs and outputs under their own terms for service operation, security, or abuse monitoring. Google's paid-service prompts, files, and responses are not used to improve Google products. DeepSeek's published API materials do not give Appraiso a fixed retention period or zero-data-retention guarantee. Perplexity's web search service keeps request and response content on its servers under its own terms, without a retention period stated to Appraiso
• Subscription data — transaction identifiers retained by RevenueCat for the duration of your subscription and as required for refund/dispute resolution
• Anonymized analytics — aggregated, non-identifiable usage data (e.g., total scan counts, feature usage trends) may be retained indefinitely as it cannot be tied to any individual
• Website analytics — Google Analytics event-level data is retained per our GA4 retention settings (up to 14 months), after which it is automatically deleted or aggregated
• Crash reports — retained for up to 90 days for debugging purposes

You can delete your account at any time through the App (Settings > Manage Profile > Delete Account). Upon deletion, your personal data (account information, scan history, and uploaded images) will be permanently removed within 30 days, unless retention is required by applicable law, court order, or to resolve pending disputes or chargebacks.

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure token storage (iOS Keychain), and server-side authentication. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

In the event of a data breach that compromises your personal information, we will notify affected users in accordance with applicable state and federal laws. Notification will be provided via email and/or in-app notice as promptly as practicable, and no later than required by law.

App Tracking Transparency

We do not use Apple's Identifier for Advertisers (IDFA) or any advertising tracking frameworks. We do not track you across other apps or websites. Our use of Firebase Analytics collects only anonymized, aggregate data and does not require App Tracking Transparency (ATT) authorization.

Do Not Track / Global Privacy Control

Our website does not currently respond to "Do Not Track" (DNT) browser signals or Global Privacy Control (GPC) signals, as there is no universally accepted standard for how to respond to such signals. However, we do not engage in cross-site tracking of our users.

Cookies & Website Analytics

Our website (appraiso.app) uses Google Analytics 4 ("GA4"), a web analytics service provided by Google, to understand how visitors find and use the site — pages visited, referral sources, approximate region, and device/browser type. GA4 sets first-party cookies (such as _ga) that assign a pseudonymous, randomly generated client ID. It does not receive your name, email, account data, or scan data, and we do not enable Google's advertising features (such as Google Signals or ad personalization) or use analytics data for advertising.

We do not use advertising cookies, tracking pixels, or cross-site trackers. Aside from analytics, our website uses no essential cookies beyond what is required for basic functionality.

You can block analytics cookies through your browser settings or with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout). Blocking these cookies does not affect your use of the website.

The Service may display links to third-party websites and online marketplaces (such as eBay, Amazon, and Google Shopping) as part of your scan results. These links are provided for informational purposes only. Some links to eBay and to retailers surfaced through Rakuten Advertising are affiliate links: they carry a referral identifier for Appraiso, and we may earn a commission if you make a purchase. The referral identifier does not include your account information.

We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party site you visit. Clicking a third-party link does not imply our endorsement of that site or its practices.

The Service is operated from the United States, and our primary hosting and database infrastructure processes data in the United States. Some service providers operate globally. In particular, DeepSeek states that it processes and stores data in the People's Republic of China.

If you access the Service from another country, your information may be transferred to and processed in the United States, China, and other countries where our service providers operate. Their data-protection laws may differ from those in your country of residence.

We minimize the text sent for Bytler, remove direct contact details before provider calls, and do not send Bytler scan photos to DeepSeek. If the separately controlled vision backup is enabled, an item scan photo may be sent to DeepSeek only when the primary item detector fails or returns unusable output. By using the Service, you acknowledge these transfers and the processing described in this Privacy Policy.

Depending on your location, you may have the following rights regarding your personal data:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of anonymous usage analytics (Settings → Privacy → Share anonymous usage analytics)
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [email protected] using the email address associated with your account. We will verify your identity by matching your request email to your account email before processing any request. We will respond within 30 days (or sooner as required by applicable law).

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information is collected, the business purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions provided by law.

Right to Opt Out of Sale or Sharing

We do not sell or share your personal information as defined under the CCPA/CPRA. We do not sell personal data to third parties for monetary or other valuable consideration, and we do not share personal data for cross-context behavioral advertising.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing, quality, or service levels for exercising your privacy rights.

How to Submit a Request

To exercise your California privacy rights, contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days as required by law.

Under Nevada Senate Bill 220, Nevada residents have the right to submit a verified request directing us not to sell their personal information. As stated in this policy, we do not sell your personal information. However, if you are a Nevada resident and wish to submit such a request, you may contact us at [email protected].

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such data, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective date" at the top of this page and, where appropriate, through in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

[email protected]

Appraiso LLC
Wyoming, United States